$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa File: 1e24d4ce-3670-324d-ac05-e7a124175628.roa (raw, json) Hash identifier: K3iuARCyGBS91PuodODOVRtHWB18GnhW2JZiAQtl2Bg= Subject key identifier: C1:3D:52:D8:58:D9:9C:16:46:F6:81:83:67:B3:D9:41:49:68:1F:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24D31941C24E0130E4F640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.220.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:d3:19:41:c2:4e:01:30:e4:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=963b8127-c9bd-4c45-ab8e-85e134074ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:0f:75:72:2b:86:12:49:34:c7:7a:e9:b3: 67:59:00:64:30:0b:df:1a:23:a0:c4:a9:86:89:8c: 65:28:dd:10:18:79:e1:85:76:4e:43:f0:bb:d4:97: 1e:6f:99:8c:a1:a1:d8:49:d9:c4:f9:50:41:ef:93: 23:92:a1:7c:1e:1b:62:12:60:16:95:ac:1a:f7:e1: 02:af:78:c2:0e:b1:67:90:60:8b:2e:ba:c3:cb:00: dd:c0:67:42:7b:5e:78:03:bd:3f:a7:85:15:0c:18: a0:db:8e:0f:27:aa:1f:45:80:ed:8e:88:64:be:67: 3e:fb:b7:76:05:ee:c6:ae:5c:5d:49:60:d2:58:99: e3:be:72:44:1a:70:9b:09:6f:17:29:0b:fd:89:bd: 06:95:94:3d:34:2a:28:48:bf:b1:77:cd:93:35:10: eb:1f:13:a7:a3:fe:b8:7a:0e:46:4e:39:a9:d8:2f: e2:6f:b5:cc:d7:9b:84:43:a1:4a:d5:da:4e:87:02: fd:2b:a0:46:bd:73:c7:3b:14:df:75:ef:39:58:da: f0:a4:77:78:22:af:2e:b1:0a:8c:a5:d4:62:00:9f: 96:3f:a0:1f:66:e0:ed:73:43:05:1d:e0:5a:87:91: 40:f0:04:f3:c3:91:e1:6e:c4:e2:ba:d0:19:43:12: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3D:52:D8:58:D9:9C:16:46:F6:81:83:67:B3:D9:41:49:68:1F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:cd:78:1a:e9:59:60:b7:51:af:ad:d2:d1:b7:b3:0d:22:46: 40:dc:dd:2a:e1:a1:b0:97:9a:2a:55:45:27:de:f2:0d:ff:38: 46:12:e5:3d:2c:57:02:c0:df:2a:3c:2c:a0:90:8f:55:af:d0: 3a:31:2e:6a:48:b1:a3:28:c2:9a:64:c8:b3:58:cc:22:f0:5e: 90:18:7f:0a:b5:34:eb:f0:44:86:b8:66:b9:46:f1:92:42:0a: 06:af:17:fc:ff:78:87:68:0c:19:26:ec:cb:c4:01:39:ec:b6: 35:5e:70:66:c3:1c:3f:bf:77:9e:aa:96:84:7f:95:22:25:66: 7c:9a:cf:88:11:9e:9a:9f:f9:08:3b:40:f8:09:04:bf:df:06: d5:c7:e8:5b:89:8e:7b:42:44:e2:55:34:cc:d5:91:35:02:1c: 0f:bc:f7:ba:dd:31:2f:5b:1b:f6:5a:06:56:fc:bc:94:35:49: e4:57:a6:a0:6c:b7:08:c5:b3:d2:b5:e5:2e:47:fe:df:65:0e: 98:ac:fd:c2:90:3d:70:e5:6c:e6:3f:d1:60:8b:6f:0a:9c:28: 61:59:de:65:4d:ed:84:9f:53:ce:18:1b:64:4f:4d:25:d3:24: a7:db:11:be:c1:f6:b1:d3:54:66:83:f3:3c:39:7e:4a:07:f6: c7:65:04:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJNMZQcJOATDk9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk OTYzYjgxMjctYzliZC00YzQ1LWFiOGUtODVlMTM0MDc0YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifAPdXIrhhJJNMd66bNnWQBkMAvfGiOgxKmG iYxlKN0QGHnhhXZOQ/C71Jceb5mMoaHYSdnE+VBB75MjkqF8HhtiEmAWlawa9+EC r3jCDrFnkGCLLrrDywDdwGdCe154A70/p4UVDBig244PJ6ofRYDtjohkvmc++7d2 Be7GrlxdSWDSWJnjvnJEGnCbCW8XKQv9ib0GlZQ9NCooSL+xd82TNRDrHxOno/64 eg5GTjmp2C/ib7XM15uEQ6FK1dpOhwL9K6BGvXPHOxTfde85WNrwpHd4Iq8usQqM pdRiAJ+WP6AfZuDtc0MFHeBah5FA8ATzw5HhbsTiutAZQxKyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME9UthY2ZwWRvaBg2ez2UFJaB+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUyNGQ0Y2UtMzY3MC0z MjRkLWFjMDUtZTdhMTI0MTc1NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXNeBrpWWC3Ua+t0tG3sw0iRkDc3SrhobCXmipVRSfe8g3/OEYS5T0s VwLA3yo8LKCQj1Wv0DoxLmpIsaMowppkyLNYzCLwXpAYfwq1NOvwRIa4ZrlG8ZJC CgavF/z/eIdoDBkm7MvEATnstjVecGbDHD+/d56qloR/lSIlZnyaz4gRnpqf+Qg7 QPgJBL/fBtXH6FuJjntCROJVNMzVkTUCHA+897rdMS9bG/ZaBlb8vJQ1SeRXpqBs twjFs9K15S5H/t9lDpis/cKQPXDlbOY/0WCLbwqcKGFZ3mVN7YSfU84YG2RPTSXT JKfbEb7B9rHTVGaD8zw5fkoH9sdlBLE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:04 2024 by rpki-client on console-ams.rpki-client.org